Even if a GP has not received any training about how to deal with Subject Access Requests there is no if’s, but’s or maybe’s – they have the legal responsibility to decide if the information can be released, and if not, document the reasons why in their clinical opinion it should not be released. Basic
A lot do but the simple answer is that if they took data protection seriously that would eat into their cost model and any money that they make. GP’s are independent contractors and until their contract basically says “We expect you to mirror larger NHS organisations” the majority will never make any improvements, including something
During the pandemic there was a GP who said that their contract did not mean that they had to actually see patients. There are a lot of good GP Practices around but it is also clear that there a lot of indifferent ones around – getting patients to chase up the results of their own
… just remember that most GP’s are private businesses and use the NHS brand (think franchises) and you then begin to understand the complications.